← Back to Skills Marketplace
Setup Client Workspace (TNCG)
by
Erwan Lee Pesle
· GitHub ↗
· v1.1.0
· MIT-0
99
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install setup-client-workspace
Description
Mise en place d'un workspace agent dédié pour un nouveau client TNCG. Utiliser quand Erwan demande de configurer un nouvel agent client (workspace, fichiers...
Usage Guidance
This skill is plausibly a legitimate onboarding playbook, but it performs system-level configuration and asks you to store and propagate many secrets without declaring them. Before installing or running it: 1) Verify you trust the source (the files will edit ~/.openclaw and openclaw.json and restart the gateway). 2) Back up openclaw.json and any system config and confirm who is authorized to make these changes. 3) Confirm where API keys will be stored — the procedure writes per-agent OpenAI keys into auth-profiles.json and into sandbox envs; ensure keys are generated per-agent and have least privilege. 4) Audit any 'clawhub install' packages and copied skills (self-improving-agent, tavily-search, escalation) before running them. 5) Pin sandbox images and avoid wildcard allowSendTo = ["*"] unless you accept sending messages to arbitrary numbers. 6) Make the required secrets and env vars explicit in your deployment checklist (HOOKS_TOKEN, GATEWAY_HOST/PORT, NANGO_PROD_SECRET_KEY, TAVILY_API_KEY, JINA_API_KEY, per-agent OPENAI_API_KEY). 7) If an autonomous agent will execute these instructions, restrict that agent's rights and require human approval for the actual config changes. If you want a stricter assessment, provide logs of any 'clawhub install' operations, the openclaw.json target before/after, and the exact commands you expect the agent to run so I can check for inconsistencies or hidden endpoints.
Capability Analysis
Type: OpenClaw Skill
Name: setup-client-workspace
Version: 1.1.0
The bundle provides instructions for an agent to perform high-privilege administrative tasks, including modifying the global 'openclaw.json' configuration, managing Docker sandboxes with external bind mounts, and handling sensitive credentials like GitHub tokens and OpenAI API keys. While these actions are aligned with the stated purpose of setting up client workspaces, the instructions involve risky operations such as using Python scripts to manually inject credentials into auth profiles and enabling broad inter-agent communication (references/openclaw-config.md and references/legacy-monolith.md). The use of 'dangerouslyAllowExternalBindSources' and the requirement for the agent to restart the gateway process represent a significant security surface.
Capability Assessment
Purpose & Capability
The name/description align with the instructions: creating a workspace, generating SOUL/IDENTITY/USER/MEMORY/TOOLS files, configuring openclaw.json, pairing WhatsApp and enabling a sandbox are coherent tasks for a setup/orchestrator skill. The requested actions (editing workspace files, creating agent entries, WhatsApp pairing) are expected for onboarding.
Instruction Scope
The SKILL.md and referenced docs instruct reading/writing system paths (e.g. ~/.openclaw, /home/ubuntu/.openclaw/agents/...), editing openclaw.json, restarting the gateway, running docker/systemctl checks, creating socat bridges and copying/ installing other skills. They also reference environment variables and secrets (HOOKS_TOKEN, GATEWAY_HOST, GATEWAY_PORT, NANGO_PROD_SECRET_KEY, TAVILY_API_KEY, JINA_API_KEY, per-agent OPENAI_API_KEY, etc.) that are not declared in metadata. Because the skill is instruction-only, these instructions are the security surface — they ask an operator/agent to touch system-wide config and sensitive credentials, which is within the setup scope but must be made explicit to downstream operators.
Install Mechanism
This is an instruction-only skill with no install spec and no bundled code to execute. It references running local commands like 'clawhub install' and copying skills from other workspaces, but there are no external download URLs or archive extraction steps in the skill files. That lowers tooling-install risk, though the 'clawhub install' step will pull external packages at runtime (not described in metadata).
Credentials
The documentation requires multiple sensitive keys and secrets (per-agent OPENAI_API_KEY to be stored in auth-profiles.json and in container env, NANGO_PROD_SECRET_KEY, TAVILY_API_KEY, JINA_API_KEY, HOOKS_TOKEN, gateway host/port, etc.). These are relevant to the onboarding workflow, but the skill metadata declares no required env/config items. Storing API keys into agent auth JSON files (written to disk) and propagating keys into sandbox envs is justified for Whisper/SDK access, but is sensitive and should be explicit in the skill metadata and operator consent. The number and breadth of secrets is significant for a single onboarding playbook.
Persistence & Privilege
The skill's procedures modify global/system configuration (openclaw.json), add agents to inter-agent allow lists, copy other skills, and restart the gateway — actions that change system-wide state. This is expected for a setup/orchestrator but represents high privilege. The skill metadata does not request 'always: true' and is user-invocable, which is appropriate; nevertheless, the operator must be aware these steps will affect other agents and services.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install setup-client-workspace - After installation, invoke the skill by name or use
/setup-client-workspace - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.0
v1.1.0: escalation via webhook gateway au lieu de sessions_send, skill escalation intégré au workflow d'onboarding
Metadata
Frequently Asked Questions
What is Setup Client Workspace (TNCG)?
Mise en place d'un workspace agent dédié pour un nouveau client TNCG. Utiliser quand Erwan demande de configurer un nouvel agent client (workspace, fichiers... It is an AI Agent Skill for Claude Code / OpenClaw, with 99 downloads so far.
How do I install Setup Client Workspace (TNCG)?
Run "/install setup-client-workspace" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Setup Client Workspace (TNCG) free?
Yes, Setup Client Workspace (TNCG) is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Setup Client Workspace (TNCG) support?
Setup Client Workspace (TNCG) is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Setup Client Workspace (TNCG)?
It is built and maintained by Erwan Lee Pesle (@superworldsavior); the current version is v1.1.0.
More Skills